我正在使用启用了 openAuth 功能的 mvc4 框架。用户可以使用外部登录“Google”或 Facebook 登录和注册。
我的问题是您如何在其中实施忘记密码系统。默认情况下,我只有他们的电子邮件地址,尤其是当他们以外部登录名登录时。当他们第一次使用外部登录名登录时,它确实要求将电子邮件注册到系统中。此时我是否应该要求提供更多信息来验证用户?
任何方向将不胜感激。
我正在使用启用了 openAuth 功能的 mvc4 框架。用户可以使用外部登录“Google”或 Facebook 登录和注册。
我的问题是您如何在其中实施忘记密码系统。默认情况下,我只有他们的电子邮件地址,尤其是当他们以外部登录名登录时。当他们第一次使用外部登录名登录时,它确实要求将电子邮件注册到系统中。此时我是否应该要求提供更多信息来验证用户?
任何方向将不胜感激。
I'm afraid there's no way you can implement a "Forgot Password" functionality within your application for external OAuth providers.
Whenever a user logs in with an OAuth provider like Facebook or Google they will be redirected to their dedicated login pages. Whenever the credentials are not right, these pages will have their own "Password Recovery" functionality implemented.
The only thing you maybe could do is to offer a direct link to their recovery pages like http://www.facebook.com/recover/initiate. But as I said, that wouldn't provide a real benefit for your users because Facebook/Google's login pages will provide these links as well.